Project

General

Profile

Bug #220

preludedb-admin fails to retrieve alert ident

Added by almost 17 years ago. Updated almost 15 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Yoann VANDOORSELAERE
Target version:
0.9.15
Start date:
Due date:
% Done:

0%

Resolution:
fixed

Description

Using preludedb-admin with a large database like

preludedb-admin delete --alert-criteria 'alert.create_time < 2007-04-26' "type=pgsql name=xxx user=xxx pass=xxx"

i am getting

retrieving alert ident failed: server closed the connection unexpectedly
        This probably means the server terminated abnormally
        before or while processing the request..

But if i put a " --count 30000 " with it, it works. It did not work with 40000 and above, though. libpreludedb-config version is 0.9.12

History

#1 Updated by Yoann VANDOORSELAERE almost 17 years ago

  • Status changed from New to Assigned

Cleanup ticket summary.

#2 Updated by Yoann VANDOORSELAERE over 15 years ago

  • Status changed from Assigned to Closed
  • Resolution set to fixed

(In r10879) Add a count command, printing the result of a COUNT on the database.

Do not fetch more than 'events-per-transaction' idents at once, work
in a loop (fix #220, refs #305).

Code cleanup, improved handling of interrupted transaction.

#3 Updated by Yoann VANDOORSELAERE almost 15 years ago

  • Project changed from PRELUDE SIEM to LibpreludeDB
  • Category deleted (2)
  • Target version deleted (0.9.15)

Also available in: Atom PDF